gifdec: reset previous Graphic Control Extension disposal type

This fixes out of array accesses.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2013-05-07 16:07:27 +02:00
parent d3f7b98f87
commit d23b8462b5
1 changed files with 1 additions and 0 deletions

View File

@ -461,6 +461,7 @@ static int gif_decode_frame(AVCodecContext *avctx, void *data, int *got_frame, A
if (s->keyframe) { if (s->keyframe) {
s->keyframe_ok = 0; s->keyframe_ok = 0;
s->gce_prev_disposal = GCE_DISPOSAL_NONE;
if ((ret = gif_read_header1(s)) < 0) if ((ret = gif_read_header1(s)) < 0)
return ret; return ret;